PMB vulnerabilities

2 known vulnerabilities in PMB from PMB Services. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  PMB: Deserialization of Untrusted Data

  CVE-2024-26289May 27, 2024PMB Services

  Deserialization of Untrusted Data vulnerability in PMB Services PMB allows Remote Code Inclusion.This issue affects PMB: from 7.5.1 before 7.5.6-2, from 7.4.1 before 7.4.9, from 7.3.1 before 7.3.18.

• 9.8 Critical severity

  pmb: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-37177Feb 21, 2024PMB ServicesEPSS 1.12%

  SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint.